OWASP Threat Dragon
6.4#5 in threat modeling softwareFree planFree planWebLinuxmacOSSelf-hosted
VisitOWASP Threat Dragon vs ThreatOpus
ThreatOpus
6.7#3 in threat modeling softwareFrom £129.99 a monthFree planWebAPI
VisitWhat both publish
| Fact | OWASP Threat Dragon | ThreatOpus |
|---|---|---|
| Intended users | OWASP describes Threat Dragon as intended for developers and defenders, and says both experienced threat modelers and beginners can use it. | ThreatOpus describes its intended users as security teams, security champions, and platform engineers seeking governed threat models and clear merge decisions. |
| Support | The project directs users to its mailing list, OWASP Slack channel, GitHub issues and public discussions for questions, bugs and feature requests. | The pricing page lists email support on Starter and Pro, and priority support on Pro and Enterprise. |
OWASP Threat Dragon plans
- FreeFree
ThreatOpus plans
- Starter£129.99 a month
- Pro£299.99 a month
- EnterprisePriced on request
- Free—
Pick OWASP Threat Dragon if…
Threat Dragon is intended for developers and defenders, including both experienced threat modelers and beginners. It suits teams that want to create threat diagrams and use supported threat categories and suggestions.
Pick ThreatOpus if…
ThreatOpus is aimed at security teams, security champions, and platform engineers who need governed threat models and clear merge decisions. Its outputs support security work but are not a substitute for professional assessment or formal risk acceptance.